With the release of the Windows 10 Insider build 18945, the Windows Subsystem for Linux version 2 now supports the ability for Windows 10 applications to connect to WSL2 apps via localhost.

An attacker can turn to JavaScript to find out the internal IP address of the victim, and then make educated guesses about the IP of other hosts on the network.